Multiple TP-Link Omada Vulnerabilities found

Several vulnerabilities have been found in the TP-Link Omada system, which is a popular software-defined networking solution for small to medium-sized businesses. The vulnerabilities could let attackers run code from a distance, causing serious security issues.

The affected devices are wireless access points, routers, switches, VPN devices, and hardware controllers for the Omada software.

• Alert

HPE alerts of hardcoded passwords in Aruba access points

By infosecbulletin / Sunday , July 20 2025

Hewlett-Packard Enterprise (HPE) warns that Aruba Instant On Access Points have hardcoded credentials, enabling attackers to skip normal authentication and...

Read More

• Cyber Attack

Akira Ransomware Allegedly Compromise 12 Companies in 72 Hours

By infosecbulletin / Sunday , July 20 2025

The Akira ransomware group increased its attacks, adding 12 new victims to its dark web portal from July 15 to...

Read More

• Alert
• Cyber Attack
• Hot Topic

Singapore urgently engage military force to tackle ‘serious’ cyberattack

By infosecbulletin / Saturday , July 19 2025

Defence Minister Chan Chun Sing said these select units will work with the Cyber Security Agency (CSA) in a united...

Read More

• Cyber Attack

Hackers infect 10M Androids with BADBOX 2.0

By infosecbulletin / Saturday , July 19 2025

Google is suing 25 unidentified cybercriminals thought to be from China for running BADBOX 2.0, a major global botnet with...

Read More

• Alert
• Vulnerabilities

Oracle Patched 200 Vulns With July 2025 CPU

By infosecbulletin / Saturday , July 19 2025

Oracle's July 2025 Critical Patch Update includes 309 new security patches, with 127 addressing remotely exploitable vulnerabilities. SecurityWeek found about...

Read More

• Vulnerabilities

Ivanti Zero-Days Exploited to Drop MDifyLoader

By infosecbulletin / Saturday , July 19 2025

Cybersecurity researchers have revealed a new malware named MDifyLoader, linked to cyber attacks using security vulnerabilities in Ivanti Connect Secure...

Read More

• Alert
• Vulnerabilities

CISA added Fortinet FortiWeb vul to KEV catalog

By infosecbulletin / Saturday , July 19 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a crucial vulnerability in Fortinet FortiWeb in its Known Exploited Vulnerabilities...

Read More

• Data Breach

Adoption Agency Exposes One Million+ Records

By infosecbulletin / Saturday , July 19 2025

Security researcher Jeremiah Fowler discovered an online database exposing sensitive information from an adoption agency. Jeremiah Fowler Jeremiah specializes in...

Read More

• Vulnerabilities

CVE-2025-20337
Patch Now! Cisco ISE bug allows pre-auth command execution

By infosecbulletin / Friday , July 18 2025

A critical vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE-PIC, identified as CVE-2025-20337, has a CVSS score of...

Read More

• Bank
• National

BD Bank Honours PABC Officials for Foiling $20 Million Cyber Fraud Attempt

By infosecbulletin / Thursday , July 17 2025

On Tuesday, Bangladesh Bank organized a special award ceremony at its headquarters in Dhaka to formally recognize and honor a...

Read More

Vulnerability Details:

Identified Vulnerabilities

Twelve unique vulnerabilities were identified and reported to the vendor following our responsible disclosure policy.

Talos ID CVE(s)
TALOS-2023-1888 CVE-2023-49906–CVE-2023-49913
TALOS-2023-1864 CVE-2023-48724
TALOS-2023-1862 CVE-2023-49133–CVE-2023-49134
TALOS-2023-1861 CVE-2023-49074
TALOS-2023-1859 CVE-2023-47618
TALOS-2023-1858 CVE-2023-47617
TALOS-2023-1857 CVE-2023-46683
TALOS-2023-1856 CVE-2023-42664
TALOS-2023-1855 CVE-2023-47167
TALOS-2023-1854 CVE-2023-47209
TALOS-2023-1853 CVE-2023-36498
TALOS-2023-1850 CVE-2023-43482

Cisco Talos found twelve vulnerabilities in the TP-Link Omada system. The vendor was informed about these vulnerabilities following a responsible disclosure policy. The affected devices are:

EAP 115 and EAP 225 wireless access points
ER7206 gigabit VPN router
Omada software controller

To read out the full report click here.